Files
chimera-gfx-Public/docs/retroarch/phase-1.0dl-official-shsrv-artifact-audit.md
T
Chimera GFX release export a6037502d7
phase0-ci / build-and-audit (push) Successful in 2m14s
Publish Chimera GFX source
2026-09-03 03:27:14 +02:00

1.2 KiB

Phase 1.0DL: official shsrv artifact audit

Status: OFFICIAL_ARTIFACT_BOUND_EXECUTION_BLOCKED_UNBOUNDED_AND_RWE

The official v0.19 release artifact was downloaded only to ignored work/ storage and bound to source commit 6f320637d56d344a0e7797753099e33238bbf146. It is 981,872 bytes with SHA-256 797827b50a93dbf327abdca45063d76ea24b17e561d927f397a0b73cadb2e2bd. It was inspected as bytes and was neither executed on the host nor sent to the console.

The ELF has an RWE load segment. Source inspection also proves an unbounded accept loop, unbounded process lifetime, per-connection threads, /dev/console opened read/write and a startup notification. It has no automatic termination deadline. Those properties violate Chimera's bounded-effect requirements even though startup does not require a persistent filesystem write.

The official binary is therefore transfer- and execution-ineligible. Exact provenance does not make its runtime safe. The safer route is a new offline design for a single-purpose raw-elfldr payload: fixed read-only database path, strict byte ceiling, inherited result descriptor only, no listener, one result stream and terminal return. That design itself grants no build or device authority.